Manually flying in Tech-Reviewed changes

From PR #309, which I am shutting down due to non-CLA

docs/admin/authorization.md

@@ -147,7 +147,7 @@ kube-system full privilege to the API, you would add this line to your policy
 file:
 
 ```json
-{"apiVersion":"abac.authorization.kubernetes.io/v1beta1","kind":"Policy","user":"system:serviceaccount:kube-system:default","namespace":"*","resource":"*","apiGroup":"*"}
+{"apiVersion":"abac.authorization.kubernetes.io/v1beta1","kind":"Policy","spec":{"user":"system:serviceaccount:kube-system:default","namespace":"*","resource":"*","apiGroup":"*"}}
 ```
 
 The apiserver will need to be restarted to pickup the new policy lines.